Moving private API keys to environment variables